Cybersecurity Threat Analyst I

Title: Cybersecurity Threat Analyst I


Location: Alexandria, VA


Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

Job Details:

• Support proactive threat analysis and hunt activities using established hypotheses, queries, procedures, and data sources


• Proactively analyze security telemetry to identify indicators of compromise, anomalous behavior, and adversary activity that has not met an incident threshold or has evaded automated security controls


• Assess and correlate data from multiple sources, including network, endpoint, identity, SIEM, threat intelligence, vulnerability, and other available security data


• Document hunt activity, findings, evidence, and recommended follow-on actions in authorized systems and initiate or support incident-response processes when malicious activity is identified


• Provide relevant findings and trends for SOC operational reporting, significant-activity reporting, and defensive awareness


• Research indicators, adversary behaviors, and suspicious activity under guidance from senior threat personnel.


• Maintain clear hunt notes and document negative as well as positive findings to support repeatability and knowledge development


• Escalate suspicious activity and potential detection gaps to senior threat analysts and watch operations

Requirements:

• Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree


• Minimum two (2) years of relevant experience in addition to education level


• Foundational knowledge of common cyber threats, indicators of compromise, network/host artifacts, and security monitoring concepts


• Familiarity with SIEM/search technologies, threat intelligence, MITRE ATT&CK, or security data analysis is desired


• Ability to document analytical reasoning and communicate findings clearly


• Must possess current DoD 8570 IAT II or IAM II certification


• Experience working in a DoD or IC environment desired


• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled